https://www.landrover.it/etc.clientlibs/jlr/clientlibs/clientlib-d…r-auth_esm_index_js.436c4aae2cc7b332206d.js

1"use strict";(self.webpackChunkaem_maven_archetype=self.webpackChunkaem_maven_archetype||[]).push([["vendors-node_modules_myaccount-core_jlr-auth_esm_index_js"],{88973:function(e,t,r){r.d(t,{kX:function(){return n.k}});var n=r(34498);r(99408)},34498:function(e,t,r){r.d(t,{k:function(){return o}});var n=function(e){return e.toString(16).padStart(2,"0")},o=function(e){var t=new Uint8Array((e||40)/2);return window.crypto.getRandomValues(t),Array.from(t,n).join("")}},99408:function(e,t,r){Object.keys},96934:function(e,t,r){r.d(t,{C6:function(){return o},Cl:function(){return i},Tt:function(){return s},YH:function(){return c},fX:function(){return u},sH:function(){return a}});var n=function(e,t){return n=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}||function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},n(e,t)};function o(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(r.prototype=t.prototype,new r)}var i=function(){return i=Object.assign||function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var o in t=arguments[r])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},i.apply(this,arguments)};function s(e,t){var r={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(r[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var o=0;for(n=Object.getOwnPropertySymbols(e);o<n.length;o++)t.indexOf(n[o])<0&&Object.prototype.propertyIsEnumerable.call(e,n[o])&&(r[n[o]]=e[n[o]])}return r}function a(e,t,r,n){return new(r||(r=Promise))(function(o,i){function s(e){try{c(n.next(e))}catch(e){i(e)}}function a(e){try{c(n.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r(function(e){e(t)})).then(s,a)}c((n=n.apply(e,t||[])).next())})}function c(e,t){var r,n,o,i={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]},s=Object.create(("function"==typeof Iterator?Iterator:Object).prototype);return s.next=a(0),s.throw=a(1),s.return=a(2),"function"==typeof Symbol&&(s[Symbol.iterator]=function(){return this}),s;function a(a){return function(c){return function(a){if(r)throw new TypeError("Generator is already executing.");for(;s&&(s=0,a[0]&&(i=0)),i;)try{if(r=1,n&&(o=2&a[0]?n.return:a[0]?n.throw||((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,a[1])).done)return o;switch(n=0,o&&(a=[2&a[0],o.value]),a[0]){case 0:case 1:o=a;break;case 4:return i.label++,{value:a[1],done:!1};case 5:i.label++,n=a[1],a=[0];continue;case 7:a=i.ops.pop(),i.trys.pop();continue;default:if(!(o=i.trys,(o=o.length>0&&o[o.length-1])||6!==a[0]&&2!==a[0])){i=0;continue}if(3===a[0]&&(!o||a[1]>o[0]&&a[1]<o[3])){i.label=a[1];break}if(6===a[0]&&i.label<o[1]){i.label=o[1],o=a;break}if(o&&i.label<o[2]){i.label=o[2],i.ops.push(a);break}o[2]&&i.ops.pop(),i.trys.pop();continue}a=t.call(e,i)}catch(e){a=[6,e],n=0}finally{r=o=0}if(5&a[0])throw a[1];return{value:a[0]?a[1]:void 0,done:!0}}([a,c])}}}function u(e,t,r){if(r||2===arguments.length)for(var n,o=0,i=t.length;o<i;o++)!n&&o in t||(n||(n=Array.prototype.slice.call(t,0,o)),n[o]=t[o]);return e.concat(n||Array.prototype.slice.call(t))}"function"==typeof SuppressedError&&SuppressedError},82772:function(e,t,r){r.d(t,{Hr:function(){return i}});var n="/gateway",o="/oauth2/realms/root/realms/customer",i={AUTHORIZE:"".concat(n).concat(o,"/authorize"),ACCESS_TOKEN:"".concat(n).concat(o,"/access_token"),USER_INFO:"".concat(n).concat(o,"/userinfo"),JWKS:"".concat(n).concat(o,"/connect/jwk_uri"),END_SESSION:"".concat(n).concat(o,"/connect/endSession"),REVOKE:"".concat(n).concat(o,"/token/revoke"),VALIDATE_SESSIONS:"".concat(n,"/").concat("json/realms/root/realms/customer/sessions")}},35874:function(e,t,r){var n,o;r.d(t,{EL:function(){return o},Eo:function(){return u},GY:function(){return c},JJ:function(){return a},Z6:function(){return l},ok:function(){return n},p:function(){return s},rS:function(){return i}}),function(e){e.CODE_VERIFIER="jlr_auth_code_verifier",e.STATE="jlr_auth_state",e.NONCE="jlr_auth_nonce",e.STATE_DATA="jlr_auth_state_data",e.AUTH_RESPONSE="jlr_auth_authorise_response"}(n||(n={})),function(e){e.MGD_IDENTIFIERS="mgd-identifiers",e.MGD_ATTRIBUTES="mgd-attributes",e.ID_TOKEN="id_token"}(o||(o={}));var i={SESSION_EXPIRES_AT:"jlr_auth_expires_at"},s={CODE:"code",STATE:"state",ISS:"iss",CLIENT_ID:"client_id"},a=64,c="openid email profile",u=30,l="1"},55866:function(e,t,r){r.d(t,{$W:function(){return f},Iq:function(){return u},KK:function(){return S},TJ:function(){return y},dk:function(){return w},hs:function(){return p},p3:function(){return h},s4:function(){return d},vR:function(){return l}});

1var n=r(96934),o=r(28622),i=r(35874),s=r(82772),a=r(76159),c=function(e,t){return(0,n.sH)(void 0,void 0,void 0,function(){var r;return(0,n.YH)(this,function(n){switch(n.label){case 0:return n.trys.push([0,3,,4]),[4,fetch(e,t)];case 1:return[4,n.sent().json()];case 2:return[2,n.sent()];case 3:throw r=n.sent(),console.error(r),r;case 4:return[2]}})})},u=function(e,t,r,o,i,a){return(0,n.sH)(void 0,void 0,void 0,function(){var u,l,f,d;return(0,n.YH)(this,function(n){switch(n.label){case 0:u=function(e){var t=new AbortController,r=setTimeout(function(){return t.abort()},e);return{signal:t.signal,timeoutId:r}}(a),l=u.signal,f=u.timeoutId,n.label=1;case 1:return n.trys.push([1,3,4,5]),[4,c("".concat(e).concat(s.Hr.ACCESS_TOKEN),{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",client_id:t,code_verifier:r,code:o,redirect_uri:i}),signal:l})];case 2:return[2,n.sent()];case 3:throw(d=n.sent())instanceof DOMException&&"AbortError"===d.name?new Error("Request was aborted due to timeout."):d;case 4:return clearTimeout(f),[7];case 5:return[2]}})})},l=function(e){return(0,n.sH)(void 0,void 0,void 0,function(){return(0,n.YH)(this,function(t){switch(t.label){case 0:return[4,c("".concat(e).concat(s.Hr.JWKS))];case 1:return[2,t.sent()]}})})},f=function(e,t){return(0,n.sH)(void 0,void 0,void 0,function(){return(0,n.YH)(this,function(r){return[2,c("".concat(e).concat(s.Hr.USER_INFO),{method:"GET",headers:{Authorization:"Bearer ".concat(t)}})]})})},d=function(e,t,r,o,i){return(0,n.sH)(void 0,void 0,void 0,function(){return(0,n.YH)(this,function(n){switch(n.label){case 0:return[4,c("".concat(e).concat(s.Hr.ACCESS_TOKEN),{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"refresh_token",client_id:t,code_verifier:r,scope:i,refresh_token:o})})];case 1:return[2,n.sent()]}})})},h=function(e,t,r){return(0,n.sH)(void 0,void 0,void 0,function(){return(0,n.YH)(this,function(n){switch(n.label){case 0:return[4,fetch("".concat(e).concat(s.Hr.END_SESSION,"?id_token_hint=").concat(t,"&client_id=").concat(r))];case 1:return[2,n.sent()]}})})},p=function(e,t,r){return(0,n.sH)(void 0,void 0,void 0,function(){return(0,n.YH)(this,function(n){switch(n.label){case 0:return[4,c("".concat(e).concat(s.Hr.REVOKE,"?token=").concat(t,"&client_id=").concat(r),{method:"POST"})];case 1:return[2,n.sent()]}})})},y=function(e){var t=Date.now()+1e3*e.expires_in;try{var r=(0,o.i)(e.access_token).exp,i=r?1e3*r:t;return(0,n.Cl)((0,n.Cl)({},e),{expires_at:i})}catch(r){return(0,n.Cl)((0,n.Cl)({},e),{expires_at:t})}},S=function(){var e,t=(null!==(e=(0,a.$E)({itemKey:i.ok.AUTH_RESPONSE,parseJson:!0}))&&void 0!==e?e:{}).expires_at;return Date.now()>t},w=function(e,t){return void 0===t&&(t=!1),(0,n.sH)(void 0,void 0,void 0,function(){return(0,n.YH)(this,function(r){switch(r.label){case 0:return[4,c("".concat(e).concat(s.Hr.VALIDATE_SESSIONS,"?_action=validate&refresh=").concat(t),{method:"POST",credentials:"include",headers:{"Accept-API-Version":"protocol=1.0,resource=2.0"}})];case 1:return[2,r.sent()]}})})}},91449:function(e,t,r){r.d(t,{Ct:function(){return l},ZP:function(){return u}});var n=r(96934),o=r(28622),i=r(35874),s=r(76159),a=["SAP-CDC","SFCRM","SVCRM","principal-uuid","primary","secondary"],c={"SAP-CDC":"SAP-CDC",SFCRM:"SFCRM",SVCRM:"SVCRM","principal-uuid":"PrincipalUuid",primary:"PrimaryCrmId",secondary:"SecondaryCrmId"},u=function(e,t){var r,a,c;if(!((null===(a=null==e?void 0:e[i.EL.MGD_ATTRIBUTES])||void 0===a?void 0:a.length)&&(null===(c=null==e?void 0:e[i.EL.MGD_IDENTIFIERS])||void 0===c?void 0:c.length)||!t)){var u=(0,o.i)(t),l=JSON.stringify(u),f=JSON.parse(l),d=null==f?void 0:f[i.EL.MGD_ATTRIBUTES],h=null==f?void 0:f[i.EL.MGD_IDENTIFIERS],p=(0,n.Cl)((0,n.Cl)({},e),((r={})[i.EL.MGD_ATTRIBUTES]=(0,n.Cl)({},d),r[i.EL.MGD_IDENTIFIERS]=(0,n.Cl)({},h),r));(0,s.ni)(i.ok.AUTH_RESPONSE,JSON.stringify(p))}},l=function(e){var t=(0,s.$E)({itemKey:i.ok.AUTH_RESPONSE,parseJson:!0})||{};Object.values((null==t?void 0:t[i.EL.MGD_IDENTIFIERS])||{}

1).length&&Object.values((null==t?void 0:t[i.EL.MGD_ATTRIBUTES])||{}).length||(u(t,e),t=(0,s.$E)({itemKey:i.ok.AUTH_RESPONSE,parseJson:!0})||{});var r=(0,n.fX)([],Object.values((null==t?void 0:t[i.EL.MGD_IDENTIFIERS])||{}),!0),o=(0,n.fX)([],Object.values((null==t?void 0:t[i.EL.MGD_ATTRIBUTES])||{}),!0);return function(e){return e.reduce(function(e,t){var r=t.split(":"),o=a.reduce(function(e,o){if(void 0===e&&(e=[]),!t.includes(o))return e;var i=r.find(function(e){return e.includes(o)})||"";return c[i]?(0,n.fX)((0,n.fX)([],e,!0),[o],!1):(0,n.fX)((0,n.fX)([],e,!0),r.filter(function(e){return e===i}),!0)},[]);return o.length?(0,n.Cl)((0,n.Cl)({},e),o.reduce(function(e,t){var i,s=r[r.length-o.length],a=c[t]||t;return(0,n.Cl)((0,n.Cl)({},e),((i={})[a]=s,i))},{})):e},{})}((0,n.fX)((0,n.fX)([],r,!0),o,!0)||[])}},71530:function(e,t,r){r.d(t,{Kn:function(){return s},OK:function(){return a}});var n=r(96934),o=r(88973),i=r(35874),s=function(e,t,r){void 0===r&&(r=!1);var n=(0,o.kX)(e),i=sessionStorage.getItem(t);return!r&&i?i:(!r&&i||sessionStorage.setItem(t,n),n)},a=function(){return(0,n.sH)(void 0,void 0,void 0,function(){var e,t,r,s;return(0,n.YH)(this,function(a){switch(a.label){case 0:return a.trys.push([0,2,,3]),e=sessionStorage.getItem(i.ok.CODE_VERIFIER),t=e||(0,o.kX)(i.JJ),sessionStorage.setItem(i.ok.CODE_VERIFIER,t),[4,(u=t,(0,n.sH)(void 0,void 0,void 0,function(){var e,t;return(0,n.YH)(this,function(r){switch(r.label){case 0:return e=new TextEncoder,t=e.encode(u),[4,crypto.subtle.digest("SHA-256",t)];case 1:return[2,r.sent()]}})}))];case 1:return r=a.sent(),[2,(c=r,c?window.btoa(String.fromCharCode.apply(null,Array.from(new Uint8Array(c)))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,""):"")];case 2:return s=a.sent(),console.error(s),[3,3];case 3:return[2]}var c,u})})}},50943:function(e,t,r){r.d(t,{J:function(){return a}});var n=r(96934),o=r(86120),i=r(12882),s=r(24717),a=function(e,t,r){return(0,n.sH)(void 0,void 0,void 0,function(){var a,c,u,l,f,d,h;return(0,n.YH)(this,function(n){switch(n.label){case 0:if(n.trys.push([0,3,,4]),a=(0,s._)(e),c=a.kid,u=a.alg,!(l=t.find(function(e){return e.kid===c})))throw new Error("Matching JWK not found");return[4,(0,i.Og)(l,u)];case 1:return f=n.sent(),[4,(0,o.V)(e,f,{clockTolerance:10})];case 2:if(d=n.sent().payload,r!==(null==d?void 0:d.aud))throw new Error("There was a problem verifying your token");return[2,d];case 3:return h=n.sent(),console.error("error:",h),[2,null];case 4:return[2]}})})}},76159:function(e,t,r){r.d(t,{$E:function(){return i},N1:function(){return c},fl:function(){return a},ge:function(){return u},ni:function(){return s}});var n=r(35874),o=function(){return globalThis.sessionStorage},i=function(e){var t,r=e.itemKey,n=e.parseJson,i=void 0!==n&&n,s=null===(t=o())||void 0===t?void 0:t.getItem(r);if(i&&s)try{return JSON.parse(s)||{}}catch(e){return console.error("Error parsing JSON from storage item",r,e),null}return s||""},s=function(e,t){o().setItem(e,t)},a=function(e){o().removeItem(e)},c=function(){o().clear()},u=function(){return i({itemKey:n.ok.AUTH_RESPONSE,parseJson:!0})||{}}},87172:function(e,t,r){r.d(t,{Ct:function(){return n.Ct},DN:function(){return i.A},Ru:function(){return o.R}});r(55866),r(35874);var n=r(91449),o=(r(76159),r(55042),r(81362)),i=r(55070)},55042:function(e,t,r){r.d(t,{A:function(){return o}});var n=r(96934),o=new(function(e){function t(){return e.call(this)||this}return(0,n.C6)(t,e),t.prototype.dispatchEvent=function(e,t){var r=new CustomEvent(e,t?{detail:t}:void 0);globalThis.dispatchEvent(r)},t.prototype.addEventListener=function(e,t){globalThis.addEventListener(e,t)},t.prototype.removeEventListener=function(e,t){globalThis.removeEventListener(e,t)},t}(r(33635).A))},81362:function(e,t,r){var n;r.d(t,{R:function(){return n}}),function(e){e.ERROR="JLR_AUTH_ERROR",e.SIGN_OUT="JLR_AUTH_SIGN_OUT",e.SESSION_CHANGED="JLR_AUTH_SESSION_CHANGED"}(n||(n={}))},55070:function(e,t,r){r.d(t,{A:function(){return v}});var n=r(96934),o=r(28622),i=r(91449),s=r(82894),a=r(35874),c=r(82772),u=r(71530),l=r(55866),f=r(50943),d=r(76159),h=r(9086),p=r(55042),y=r(81362),S=r(8678),w=r(52495),v=function(){function e(e){var t,r=void 0===e?{}:e,n=r.redirectUri,o=void 0===n?window.location.origin:n,i=r.redirectPath,s=void 0===i?"".concat(window.location.pathname).concat(window.location.search).concat(window.location.hash):i,c=r.clientId,u=void 0===c?"":c,l=r.authDomain,f=void 0===l?"":l,h=r.authTimeout,S=void 0===h?1e4:h,w=r.scope,v=void 0===w?"":w,E=r.brand,m=void 0===E?"":E,g=r.market,b=void 0===g?"":g,T=r.locale,_=void 0===T?"":T,A=r.acr_values,k=void 0===A?a.Z6:A,R=r.allowRefresh,C=void 0===R||R,O=this;if(this.redirectPath=s,this.redirectUri=o,this.clientId=u,this.href="",this.authDomain=f,this.EventsService=null!==(t=globalThis.JlrAuthEvents)&&void 0!==t?t:p.A,this.scope="".concat(a.GY," ").concat(v).trim(),this.brand=m,this.market=b,this.access_token="",this.id_token="",this.locale=_,this.acr_values=k,this.allowRefresh=C,globalThis.JlrAuthEvents||(globalThis.JlrAuthEvents=this.EventsService),this.authTimeout=S,!f)throw new Error("Failed to instantiate JlrAuth. No authDomain provided.");this.generateHref().then(function(e){O.href=e}),"undefined"!=typeof window&&window.addEventListener("storage",function(e){e.key===a.rS.SESSION_EXPIRES_AT&&(e.newValue||(O.access_token="",O.id_token="",(0,d.N1)()),O.EventsService.publish({type:y.R.SESSION_CHANGED}))})}return e.getInstance=function(t){return e.instance||(e.instance=new e(t)),e.instance},e.prototype.generateHref=function(){var e;return(0,n.sH)(this,void 0,void 0,function(){var t,r,o,i,l,f,h;return(0,n.YH)(this,function(p){switch(p.label){case 0:return[4,(0,u.OK)()];case 1:return t=null!==(e=p.sent())&&void 0!==e?e:"",r=(0,u.Kn)(a.JJ,a.ok.STATE,!0),o=(0,u.Kn)(a.JJ,a.ok.NONCE,!0),i=JSON.stringify((0,n.Cl)((0,n.Cl)({},(0,s.X)()),((f={})[r]={redirect_path:this.redirectPath},f))),(0,d.ni)(a.ok.STATE_DATA,i),l=new URLSearchParams(((h={redirect_uri:this.redirectUri})[a.p.CLIENT_ID]=this.clientId,h.response_type="code",h.scope=this.scope,h.code_challenge=t,h.code_challenge_method="S256",h[a.p.STATE]=r,h.nonce=o,h.brand=this.brand,h.country_code=this.market,h.locale=this.locale,h.acr_values=this.acr_values,h)),[2,"".concat(this.authDomain).concat(c.Hr.AUTHORIZE,"?").concat(l)]}})})},e.prototype.getHref=function(){return(0,n.sH)(this,void 0,void 0,function(){var e;return(0,n.YH)(this,function(t){switch(t.label){case 0:return(e=this.href)?[3,2]:[4,this.generateHref()];case 1:e=t.sent(),t.label=2;case 2:return[2,e]}})})},e.prototype.login=function(){return(0,n.sH)(this,void 0,void 0,function(){var e;return(0,n.YH)(this,function(t){switch(t.label){case 0:return e=window.location,[4,this.getHref()];case 1:return e.href=t.sent(),[2]}})})},e.prototype.authorise=function(){var e;return(0,n.sH)(this,void 0,void 0,function(){var t,r,o,s,c,u,f,p,y,S;return(0,n.YH)(this,function(v){switch(v.label){case 0:return v.trys.push([0,3,,4]),[4,this.getUserAccessToken()];case 1:return t=v.sent(),[4,this.areTokensValid([null==t?void 0:t.id_token,null==t?void 0:t.access_token])];

1case 2:if(!v.sent())throw new Error("ID or Access token not valid");return r=new URL(this.redirectUri).origin,o=t.access_token,s=t.id_token,c=(0,n.Tt)(t,["access_token","id_token"]),this.access_token=o,this.id_token=s,this.setLocalStorageSessionExpiry(s),u=(0,l.TJ)(c),f=this.getExistingTokens(),(0,d.ni)(a.ok.AUTH_RESPONSE,JSON.stringify((0,n.Cl)((0,n.Cl)({},f),u))),(0,i.ZP)((0,n.Cl)((0,n.Cl)({},f),u),s),p=(0,h.w)(window.location.href,a.p.STATE),(y=null===(e=(0,d.$E)({itemKey:a.ok.STATE_DATA,parseJson:!0}))||void 0===e?void 0:e[p]).redirect_path&&window.location.replace("".concat(r).concat(y.redirect_path)),[3,4];case 3:return S=v.sent(),(0,w.p)(S),[3,4];case 4:return[2]}})})},e.prototype.getUserAccessToken=function(){return(0,n.sH)(this,void 0,void 0,function(){var e,t,r,o,i,c;return(0,n.YH)(this,function(n){switch(n.label){case 0:if(e=(0,h.w)(window.location.href,a.p.CODE),t=(0,h.w)(window.location.href,a.p.STATE),r=(0,S.g)(),o=(0,h.w)(window.location.href,a.p.CLIENT_ID),i=(0,s.X)(),c=(0,d.$E)({itemKey:a.ok.CODE_VERIFIER}),!e||!c||r!==this.authDomain||!i[t]||o!==this.clientId)throw new Error("Authorisation request failed due to missing or invalid parameters.");return[4,(0,l.Iq)(this.authDomain,this.clientId,c,e,this.redirectUri,this.authTimeout)];case 1:return[2,n.sent()]}})})},e.prototype.verifyToken=function(e,t){return(0,n.sH)(this,void 0,void 0,function(){return(0,n.YH)(this,function(r){switch(r.label){case 0:return[4,(0,f.J)(e,t,this.clientId)];case 1:return[2,r.sent()]}})})},e.prototype.shouldRefreshUserAccessToken=function(){return!!this.allowRefresh&&((0,l.KK)()||!this.access_token||!this.id_token)},e.prototype.refreshUserAccessToken=function(e,t){var r,o;return void 0===e&&(e=!1),void 0===t&&(t=""),(0,n.sH)(this,void 0,void 0,function(){var s,c,u,f,h,p,y,S,w;return(0,n.YH)(this,function(v){switch(v.label){case 0:return this.shouldRefreshUserAccessToken()||e?(s=(null!==(r=(0,d.$E)({itemKey:a.ok.AUTH_RESPONSE,parseJson:!0}))&&void 0!==r?r:{}).refresh_token,c=(0,d.$E)({itemKey:a.ok.CODE_VERIFIER}),u=t.length?t:this.scope,[4,(0,l.s4)(this.authDomain,this.clientId,c,s,u)]):[2];case 1:if((null==(f=v.sent())?void 0:f.error)||!(null==f?void 0:f.access_token))throw console.error(null==f?void 0:f.error),h=(null===(o=null==f?void 0:f.error)||void 0===o?void 0:o.message)||"There was a problem refreshing the access token",new Error(h);return p=f.access_token,y=f.id_token,S=(0,n.Tt)(f,["access_token","id_token"]),this.access_token=p,this.id_token=y,this.setLocalStorageSessionExpiry(y),w=this.getExistingTokens(),(0,d.ni)(a.ok.AUTH_RESPONSE,JSON.stringify((0,n.Cl)((0,n.Cl)({},w),(0,l.TJ)(S)))),(0,i.ZP)((0,n.Cl)((0,n.Cl)({},w),(0,l.TJ)(S)),y),[2,f]}})})},e.prototype.refreshUserAccessTokenOrLogin=function(e){return void 0===e&&(e=!1),(0,n.sH)(this,void 0,void 0,function(){return(0,n.YH)(this,function(t){switch(t.label){case 0:return t.trys.push([0,2,,3]),[4,this.refreshUserAccessToken(e)];case 1:return t.sent(),[3,3];case 2:return t.sent(),this.login(),[3,3];case 3:return[2]}})})},e.prototype.clearStoredTokens=function(){this.access_token="",this.id_token="",(0,d.fl)(a.ok.AUTH_RESPONSE),this.clearLocalStorageSessionExpiry()},e.prototype.getUserInfo=function(){return(0,n.sH)(this,void 0,void 0,function(){var e,t;return(0,n.YH)(this,function(r){switch(r.label){case 0:return[4,this.refreshUserAccessToken()];case 1:r.sent(),r.label=2;case 2:return r.trys.push([2,4,,5]),[4,(0,l.$W)(this.authDomain,this.access_token)];case 3:if(!(e=r.sent())||e.error)throw new Error((null==e?void 0:e.error)||"Failed to fetch user details");return[2,e];case 4:return t=r.sent(),console.log(t),this.clearStoredTokens(),[2,null];case 5:return[2]}})})},e.prototype.checkUserAuthentication=function(){return(0,n.sH)(this,void 0,void 0,function(){return(0,n.YH)(this,function(e){return(0,h.w)(window.location.href,a.p.CODE)&&this.authorise(),[2]})})},e.prototype.logout=function(e){return void 0===e&&(e=window.location.origin),(0,n.sH)(this,void 0,void 0,function(){var t;return(0,n.YH)(this,function(r){switch(r.label){case 0:return t=(0,d.$E)({itemKey:a.ok.AUTH_RESPONSE,parseJson:!0}

1).refresh_token,[4,(0,l.p3)(this.authDomain,this.id_token||t,this.clientId)];case 1:return r.sent(),[4,(0,l.hs)(this.authDomain,t,this.clientId)];case 2:return r.sent(),this.clearStoredTokens(),(0,d.N1)(),window.location.href=e,[2]}})})},e.prototype.revokeRefreshTokenAndRemoveAuthResponse=function(){return(0,n.sH)(this,void 0,void 0,function(){var e,t;return(0,n.YH)(this,function(r){switch(r.label){case 0:e=(0,d.$E)({itemKey:a.ok.AUTH_RESPONSE,parseJson:!0}).refresh_token,r.label=1;case 1:return r.trys.push([1,3,,4]),[4,(0,l.hs)(this.authDomain,e,this.clientId)];case 2:return r.sent(),(0,d.fl)(a.ok.AUTH_RESPONSE),[3,4];case 3:throw(t=r.sent())instanceof Error&&console.error(t.message),t;case 4:return[2]}})})},e.prototype.getUserTokenBundle=function(){return(0,n.Cl)((0,n.Cl)({},(0,d.ge)()),{id_token:this.id_token,access_token:this.access_token})},e.prototype.getExistingTokens=function(){var e=(0,d.ge)(),t=e.access_token,r=e.id_token;return t&&r?{access_token:t,id_token:r}:{}},e.prototype.isUserLoggedIn=function(e){return void 0===e&&(e=!1),(0,n.sH)(this,void 0,void 0,function(){var t,r,o,i,s;return(0,n.YH)(this,function(n){switch(n.label){case 0:return t=this.getUserTokenBundle().refresh_token,[4,(0,l.vR)(this.authDomain)];case 1:return r=n.sent(),o=r.keys,[4,this.verifyToken(t,o)];case 2:return n.sent()&&this.refreshUserAccessToken(),[4,this.validateSession(e)];case 3:return(i=n.sent()).valid?[2,i&&!this.shouldRefreshUserAccessToken()]:[2,((null==(s=this.getUserTokenBundle())?void 0:s.access_token)||(null==s?void 0:s.id_token))&&!this.shouldRefreshUserAccessToken()]}})})},e.prototype.areTokensValid=function(e){return(0,n.sH)(this,void 0,void 0,function(){var t,r,o,i,s;return(0,n.YH)(this,function(n){switch(n.label){case 0:return n.trys.push([0,6,,7]),[4,(0,l.vR)(this.authDomain)];case 1:t=n.sent(),r=t.keys,o=0,i=e,n.label=2;case 2:return o<i.length?(s=i[o],[4,this.verifyToken(s,r)]):[3,5];case 3:if(!n.sent())return[2,!1];n.label=4;case 4:return o++,[3,2];case 5:return[3,7];case 6:return n.sent(),[2,!1];case 7:return[2,!0]}})})},e.prototype.areUserTokensValid=function(){var e=this.getUserTokenBundle(),t=e.access_token,r=e.id_token,n=e.refresh_token;return this.areTokensValid([r,t,n])},e.prototype.isRefreshTokenValid=function(){return(0,n.sH)(this,void 0,void 0,function(){var e;return(0,n.YH)(this,function(t){return(e=this.getUserTokenBundle().refresh_token)?[2,this.areTokensValid([e])]:[2,!1]})})},e.prototype.validateSession=function(e){return void 0===e&&(e=!1),(0,n.sH)(this,void 0,void 0,function(){return(0,n.YH)(this,function(t){switch(t.label){case 0:return[4,(0,l.dk)(this.authDomain,e)];case 1:return[2,t.sent()]}})})},e.prototype.setLocalStorageSessionExpiry=function(e){if("undefined"!=typeof window)try{var t=(0,o.i)(e).exp;t&&(globalThis.localStorage.setItem(a.rS.SESSION_EXPIRES_AT,(1e3*t).toString()),this.EventsService.publish({type:y.R.SESSION_CHANGED}))}catch(e){console.error("Failed to decode ID token for session expiry",e)}},e.prototype.clearLocalStorageSessionExpiry=function(){"undefined"!=typeof window&&(globalThis.localStorage.removeItem(a.rS.SESSION_EXPIRES_AT),this.EventsService.publish({type:y.R.SESSION_CHANGED}))},e.prototype.isSessionActive=function(){if("undefined"==typeof window)return!1;var e=globalThis.localStorage.getItem(a.rS.SESSION_EXPIRES_AT);return!!e&&Date.now()<Number(e)},e.prototype.getIds=function(){return(0,i.Ct)(this.id_token)},e.prototype.getSignInSecurityUrl=function(e,t,r){return"".concat(this.authDomain,"/customer/").concat(e,"?brand=").concat(this.brand,"&country_code=").concat(this.market,"&locale=").concat(this.locale,"&goto=").concat(t,"&gotoOnFail=").concat(r)},e}()},33635:function(e,t,r){r.d(t,{A:function(){return o}});var n=r(96934),o=function(e){function t(){var t=e.call(this)||this;return t.queue=new Set,t.hasQueueRun=!1,t}return(0,n.C6)(t,e),t.prototype.publish=function(e){this.subscribers.size?this.sendToSubscribers(e):this.queue.add(e)},t.prototype.subscribe=function(e){var t=this;this.subscribers.add(e),this.queue.size&&!this.hasQueueRun&&(this.queue.forEach(function(e){t.sendToSubscribers(e)}

1),this.hasQueueRun=!0)},t.prototype.sendToSubscribers=function(e){this.subscribers.forEach(function(t){return t(e)})},t}(r(25650).Q)},25650:function(e,t,r){r.d(t,{Q:function(){return n}});var n=function(){function e(){this.subscribers=new Set}return e.prototype.subscribe=function(e){this.subscribers.add(e)},e.prototype.unsubscribe=function(e){this.subscribers.delete(e)},e.prototype.publish=function(e){this.subscribers.forEach(function(t){return t(e)})},e}()},52495:function(e,t,r){r.d(t,{p:function(){return i}});var n=r(55042),o=r(81362);function i(e,t){void 0===t&&(t=o.R.ERROR),console.error(e);var r=e instanceof Error?e:new Error(String(e));n.A.publish({type:t,details:r})}},8678:function(e,t,r){r.d(t,{g:function(){return s}});var n=r(35874),o=r(9086),i=function(){return(0,o.w)(window.location.href,n.p.ISS)},s=function(){return i()?new URL(i()).origin:""}},82894:function(e,t,r){r.d(t,{X:function(){return i}});var n=r(35874),o=r(76159),i=function(){var e=JSON.parse((0,o.$E)({itemKey:n.ok.STATE_DATA})||"{}");return s(e)},s=function(e){return Object.keys(e).length>n.Eo?((0,o.fl)(n.ok.STATE_DATA),{}):e}},9086:function(e,t,r){r.d(t,{w:function(){return n}});var n=function(e,t){return function(e){var t=new URL(e);return new URLSearchParams(t.search)}(new URL(e).href).get(t)||""}},13973:function(e,t,r){r.d(t,{B:function(){return s}});var n=r(61623),o=r(88817),i=r(44203);async function s(e,t,r){if(e instanceof Uint8Array&&(e=i.D0.decode(e)),"string"!=typeof e)throw new o.Ye("Compact JWS must be a string or Uint8Array");const{0:s,1:a,2:c,length:u}=e.split(".");if(3!==u)throw new o.Ye("Invalid Compact JWS");const l=await(0,n.Z)({payload:a,protected:s,signature:c},t,r),f={payload:l.payload,protectedHeader:l.protectedHeader};return"function"==typeof t?{...f,key:l.key}:f}},61623:function(e,t,r){r.d(t,{Z:function(){return h}});var n=r(61096),o=r(17456),i=r(88817),s=r(44203),a=r(52214),c=r(26135),u=r(23038),l=r(36012),f=r(49022),d=r(90132);async function h(e,t,r){if(!(0,c.Gv)(e))throw new i.Ye("Flattened JWS must be an object");if(void 0===e.protected&&void 0===e.header)throw new i.Ye('Flattened JWS must have either of the "protected" or "header" members');if(void 0!==e.protected&&"string"!=typeof e.protected)throw new i.Ye("JWS Protected Header incorrect type");if(void 0===e.payload)throw new i.Ye("JWS Payload missing");if("string"!=typeof e.signature)throw new i.Ye("JWS Signature missing or incorrect type");if(void 0!==e.header&&!(0,c.Gv)(e.header))throw new i.Ye("JWS Unprotected Header incorrect type");let h={};if(e.protected)try{const t=(0,n.D)(e.protected);h=JSON.parse(s.D0.decode(t))}catch{throw new i.Ye("JWS Protected Header is invalid")}if(!(0,c.fz)(h,e.header))throw new i.Ye("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");const p={...h,...e.header};let y=!0;if((0,l.n)(i.Ye,new Map([["b64",!0]]),r?.crit,h,p).has("b64")&&(y=h.b64,"boolean"!=typeof y))throw new i.Ye('The "b64" (base64url-encode payload) Header Parameter must be a boolean');const{alg:S}=p;if("string"!=typeof S||!S)throw new i.Ye('JWS "alg" (Algorithm) Header Parameter missing or invalid');const w=r&&(0,f.F)("algorithms",r.algorithms);if(w&&!w.has(S))throw new i.Rb('"alg" (Algorithm) Header Parameter value not allowed');if(y){if("string"!=typeof e.payload)throw new i.Ye("JWS Payload must be a string")}else if("string"!=typeof e.payload&&!(e.payload instanceof Uint8Array))throw new i.Ye("JWS Payload must be a string or an Uint8Array instance");let v=!1;"function"==typeof t&&(t=await t(h,e),v=!0),(0,u.y)(S,t,"verify");const E=(0,s.xW)(void 0!==e.protected?(0,s.lF)(e.protected):new Uint8Array,(0,s.lF)("."),"string"==typeof e.payload?y?(0,s.lF)(e.payload):s.Rd.encode(e.payload):e.payload),m=(0,a.h2)(e.signature,"signature",i.Ye),g=await(0,d.l)(t,S);if(!await(0,o.MX)(S,g,m,E))throw new i.h2;let b;b=y?(0,a.h2)(e.payload,"payload",i.Ye):"string"==typeof e.payload?s.Rd.encode(e.payload):e.payload;const T={payload:b};return void 0!==e.protected&&(T.protectedHeader=h),void 0!==e.header&&(T.unprotectedHeader=e.header),v?{...T,key:g}:T}},86120:function(e,t,r){r.d(t,{V:function(){return s}});var n=r(13973),o=r(58799),i=r(88817);async function s(e,t,r){const s=await(0,n.B)(e,t,r);if(s.protectedHeader.crit?.includes("b64")&&!1===s.protectedHeader.b64)throw new i.Dp("JWTs MUST NOT use unencoded payload");const a={payload:(0,o.k6)(s.protectedHeader,s.payload,r),protectedHeader:s.protectedHeader};return"function"==typeof t?{...a,key:s.key}:a}},12882:function(e,t,r){r.d(t,{Og:function(){return a}});var n=r(61096),o=r(62947),i=r(88817),s=r(26135);async function a(e,t,r){if(!(0,s.Gv)(e))throw new TypeError("JWK must be an object");let a;switch(t??=e.alg,a??=r?.extractable??e.ext,e.kty){case"oct":if("string"!=typeof e.k||!e.k)throw new TypeError('missing "k" (Key Value) Parameter value');return(0,n.D)(e.k);case"RSA":if("oth"in e&&void 0!==e.oth)throw new i.T0('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');return(0,o.x)({...e,alg:t,ext:a});case"AKP":if("string"!=typeof e.alg||!e.alg)throw new TypeError('missing "alg" (Algorithm) Parameter value');

1if(void 0!==t&&t!==e.alg)throw new TypeError("JWK alg and alg option value mismatch");return(0,o.x)({...e,ext:a});case"EC":case"OKP":return(0,o.x)({...e,alg:t,ext:a});default:throw new i.T0('Unsupported "kty" (Key Type) Parameter value')}}},24248:function(e,t,r){function n(e){if(Uint8Array.fromBase64)return Uint8Array.fromBase64(e);const t=atob(e),r=new Uint8Array(t.length);for(let e=0;e<t.length;e++)r[e]=t.charCodeAt(e);return r}r.d(t,{y:function(){return n}})},44203:function(e,t,r){r.d(t,{D0:function(){return o},Rd:function(){return n},lF:function(){return s},xW:function(){return i}});const n=new TextEncoder,o=new TextDecoder;function i(...e){const t=e.reduce((e,{length:t})=>e+t,0),r=new Uint8Array(t);let n=0;for(const t of e)r.set(t,n),n+=t.length;return r}function s(e){const t=new Uint8Array(e.length);for(let r=0;r<e.length;r++){const n=e.charCodeAt(r);if(n>127)throw new TypeError("non-ASCII string encountered in encode()");t[r]=n}return t}},23038:function(e,t,r){r.d(t,{y:function(){return l}});var n=r(39203),o=r(10561),i=r(26135);const s=e=>e?.[Symbol.toStringTag],a=(e,t,r)=>{if(void 0!==t.use){let e;switch(r){case"sign":case"verify":e="sig";break;case"encrypt":case"decrypt":e="enc"}if(t.use!==e)throw new TypeError(`Invalid key for this operation, its "use" must be "${e}" when present`)}if(void 0!==t.alg&&t.alg!==e)throw new TypeError(`Invalid key for this operation, its "alg" must be "${e}" when present`);if(Array.isArray(t.key_ops)){let n;switch(!0){case"sign"===r||"verify"===r:case"dir"===e:case e.includes("CBC-HS"):n=r;break;case e.startsWith("PBES2"):n="deriveBits";break;case/^A\d{3}(?:GCM)?(?:KW)?$/.test(e):n=!e.includes("GCM")&&e.endsWith("KW")?"encrypt"===r?"wrapKey":"unwrapKey":r;break;case"encrypt"===r&&e.startsWith("RSA"):n="wrapKey";break;case"decrypt"===r:n=e.startsWith("RSA")?"unwrapKey":"deriveBits"}if(n&&!1===t.key_ops?.includes?.(n))throw new TypeError(`Invalid key for this operation, its "key_ops" must include "${n}" when present`)}return!0},c=(e,t,r)=>{if(!(t instanceof Uint8Array)){if(i.ll(t)){if(i.t9(t)&&a(e,t,r))return;throw new TypeError('JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present')}if(!(0,o.P2)(t))throw new TypeError((0,n.t)(e,t,"CryptoKey","KeyObject","JSON Web Key","Uint8Array"));if("secret"!==t.type)throw new TypeError(`${s(t)} instances for symmetric algorithms must be of type "secret"`)}},u=(e,t,r)=>{if(i.ll(t))switch(r){case"decrypt":case"sign":if(i.W2(t)&&a(e,t,r))return;throw new TypeError("JSON Web Key for this operation must be a private JWK");case"encrypt":case"verify":if(i.M3(t)&&a(e,t,r))return;throw new TypeError("JSON Web Key for this operation must be a public JWK")}if(!(0,o.P2)(t))throw new TypeError((0,n.t)(e,t,"CryptoKey","KeyObject","JSON Web Key"));if("secret"===t.type)throw new TypeError(`${s(t)} instances for asymmetric algorithms must not be of type "secret"`);if("public"===t.type)switch(r){case"sign":throw new TypeError(`${s(t)} instances for asymmetric algorithm signing must be of type "private"`);case"decrypt":throw new TypeError(`${s(t)} instances for asymmetric algorithm decryption must be of type "private"`)}if("private"===t.type)switch(r){case"verify":throw new TypeError(`${s(t)} instances for asymmetric algorithm verifying must be of type "public"`);case"encrypt":throw new TypeError(`${s(t)} instances for asymmetric algorithm encryption must be of type "public"`)}};function l(e,t,r){switch(e.substring(0,2)){case"A1":case"A2":case"di":case"HS":case"PB":c(e,t,r);break;default:u(e,t,r)}}},64158:function(e,t,r){r.d(t,{Y:function(){return a}});const n=(e,t="algorithm.name")=>new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`),o=(e,t)=>e.name===t;function i(e,t){var r;if((r=e.hash,parseInt(r.name.slice(4),10))!==t)throw n(`SHA-${t}`,"algorithm.hash")}function s(e,t){if(t&&!e.usages.includes(t))throw new TypeError(`CryptoKey does not support this operation, its usages must include ${t}.`)}function a(e,t,r){switch(t){case"HS256":case"HS384":case"HS512":if(!o(e.algorithm,"HMAC"))throw n("HMAC");i(e.algorithm,parseInt(t.slice(2),10));break;case"RS256":case"RS384":case"RS512":if(!o(e.algorithm,"RSASSA-PKCS1-v1_5"))throw n("RSASSA-PKCS1-v1_5");i(e.algorithm,parseInt(t.slice(2),10));break;case"PS256":case"PS384":case"PS512":if(!o(e.algorithm,"RSA-PSS"))throw n("RSA-PSS");i(e.algorithm,parseInt(t.slice(2),10));break;

1case"Ed25519":case"EdDSA":if(!o(e.algorithm,"Ed25519"))throw n("Ed25519");break;case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":if(!o(e.algorithm,t))throw n(t);break;case"ES256":case"ES384":case"ES512":{if(!o(e.algorithm,"ECDSA"))throw n("ECDSA");const r=function(e){switch(e){case"ES256":return"P-256";case"ES384":return"P-384";case"ES512":return"P-521";default:throw new Error("unreachable")}}(t);if(e.algorithm.namedCurve!==r)throw n(r,"algorithm.namedCurve");break}default:throw new TypeError("CryptoKey does not support this operation")}s(e,r)}},52214:function(e,t,r){r.d(t,{h2:function(){return o}});var n=r(61096);Symbol();function o(e,t,r){try{return(0,n.D)(e)}catch{throw new r(`Failed to base64url decode the ${t}`)}}},39203:function(e,t,r){function n(e,t,...r){if((r=r.filter(Boolean)).length>2){const t=r.pop();e+=`one of type ${r.join(", ")}, or ${t}.`}else 2===r.length?e+=`one of type ${r[0]} or ${r[1]}.`:e+=`of type ${r[0]}.`;return null==t?e+=` Received ${t}`:"function"==typeof t&&t.name?e+=` Received function ${t.name}`:"object"==typeof t&&null!=t&&t.constructor?.name&&(e+=` Received an instance of ${t.constructor.name}`),e}r.d(t,{X:function(){return o},t:function(){return i}});const o=(e,...t)=>n("Key must be ",e,...t),i=(e,t,...r)=>n(`Key for the ${e} algorithm must be `,t,...r)},10561:function(e,t,r){r.d(t,{D2:function(){return o},P2:function(){return i},R7:function(){return n}});const n=e=>{if("CryptoKey"===e?.[Symbol.toStringTag])return!0;try{return e instanceof CryptoKey}catch{return!1}},o=e=>"KeyObject"===e?.[Symbol.toStringTag],i=e=>n(e)||o(e)},62947:function(e,t,r){r.d(t,{x:function(){return i}});var n=r(88817);const o='Invalid or unsupported JWK "alg" (Algorithm) Parameter value';async function i(e){if(!e.alg)throw new TypeError('"alg" argument is required when "jwk.alg" is not present');const{algorithm:t,keyUsages:r}=function(e){let t,r;switch(e.kty){case"AKP":switch(e.alg){case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":t={name:e.alg},r=e.priv?["sign"]:["verify"];break;default:throw new n.T0(o)}break;case"RSA":switch(e.alg){case"PS256":case"PS384":case"PS512":t={name:"RSA-PSS",hash:`SHA-${e.alg.slice(-3)}`},r=e.d?["sign"]:["verify"];break;case"RS256":case"RS384":case"RS512":t={name:"RSASSA-PKCS1-v1_5",hash:`SHA-${e.alg.slice(-3)}`},r=e.d?["sign"]:["verify"];break;case"RSA-OAEP":case"RSA-OAEP-256":case"RSA-OAEP-384":case"RSA-OAEP-512":t={name:"RSA-OAEP",hash:`SHA-${parseInt(e.alg.slice(-3),10)||1}`},r=e.d?["decrypt","unwrapKey"]:["encrypt","wrapKey"];break;default:throw new n.T0(o)}break;case"EC":switch(e.alg){case"ES256":case"ES384":case"ES512":t={name:"ECDSA",namedCurve:{ES256:"P-256",ES384:"P-384",ES512:"P-521"}[e.alg]},r=e.d?["sign"]:["verify"];break;case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":t={name:"ECDH",namedCurve:e.crv},r=e.d?["deriveBits"]:[];break;default:throw new n.T0(o)}break;

1case"OKP":switch(e.alg){case"Ed25519":case"EdDSA":t={name:"Ed25519"},r=e.d?["sign"]:["verify"];break;case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":t={name:e.crv},r=e.d?["deriveBits"]:[];break;default:throw new n.T0(o)}break;default:throw new n.T0('Invalid or unsupported JWK "kty" (Key Type) Parameter value')}return{algorithm:t,keyUsages:r}}(e),i={...e};return"AKP"!==i.kty&&delete i.alg,delete i.use,crypto.subtle.importKey("jwk",i,t,e.ext??(!e.d&&!e.priv),e.key_ops??r)}},58799:function(e,t,r){r.d(t,{k6:function(){return S}});var n=r(88817),o=r(44203),i=r(26135);const s=e=>Math.floor(e.getTime()/1e3),a=60,c=60*a,u=24*c,l=7*u,f=365.25*u,d=/^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i;function h(e){const t=d.exec(e);if(!t||t[4]&&t[1])throw new TypeError("Invalid time period format");const r=parseFloat(t[2]);let n;switch(t[3].toLowerCase()){case"sec":case"secs":case"second":case"seconds":case"s":n=Math.round(r);break;case"minute":case"minutes":case"min":case"mins":case"m":n=Math.round(r*a);break;case"hour":case"hours":case"hr":case"hrs":case"h":n=Math.round(r*c);break;case"day":case"days":case"d":n=Math.round(r*u);break;case"week":case"weeks":case"w":n=Math.round(r*l);break;default:n=Math.round(r*f)}return"-"===t[1]||"ago"===t[4]?-n:n}const p=e=>e.includes("/")?e.toLowerCase():`application/${e.toLowerCase()}`,y=(e,t)=>"string"==typeof e?t.includes(e):!!Array.isArray(e)&&t.some(Set.prototype.has.bind(new Set(e)));function S(e,t,r={}){let a;try{a=JSON.parse(o.D0.decode(t))}catch{}if(!(0,i.Gv)(a))throw new n.Dp("JWT Claims Set must be a top-level JSON object");const{typ:c}=r;if(c&&("string"!=typeof e.typ||p(e.typ)!==p(c)))throw new n.ie('unexpected "typ" JWT header value',a,"typ","check_failed");const{requiredClaims:u=[],issuer:l,subject:f,audience:d,maxTokenAge:S}=r,w=[...u];void 0!==S&&w.push("iat"),void 0!==d&&w.push("aud"),void 0!==f&&w.push("sub"),void 0!==l&&w.push("iss");for(const e of new Set(w.reverse()))if(!(e in a))throw new n.ie(`missing required "${e}" claim`,a,e,"missing");if(l&&!(Array.isArray(l)?l:[l]).includes(a.iss))throw new n.ie('unexpected "iss" claim value',a,"iss","check_failed");if(f&&a.sub!==f)throw new n.ie('unexpected "sub" claim value',a,"sub","check_failed");if(d&&!y(a.aud,"string"==typeof d?[d]:d))throw new n.ie('unexpected "aud" claim value',a,"aud","check_failed");let v;switch(typeof r.clockTolerance){case"string":v=h(r.clockTolerance);break;case"number":v=r.clockTolerance;break;case"undefined":v=0;break;default:throw new TypeError("Invalid clockTolerance option type")}const{currentDate:E}=r,m=s(E||new Date);if((void 0!==a.iat||S)&&"number"!=typeof a.iat)throw new n.ie('"iat" claim must be a number',a,"iat","invalid");if(void 0!==a.nbf){if("number"!=typeof a.nbf)throw new n.ie('"nbf" claim must be a number',a,"nbf","invalid");if(a.nbf>m+v)throw new n.ie('"nbf" claim timestamp check failed',a,"nbf","check_failed")}if(void 0!==a.exp){if("number"!=typeof a.exp)throw new n.ie('"exp" claim must be a number',a,"exp","invalid");if(a.exp<=m-v)throw new n.n('"exp" claim timestamp check failed',a,"exp","check_failed")}if(S){const e=m-a.iat;if(e-v>("number"==typeof S?S:h(S)))throw new n.n('"iat" claim timestamp check failed (too far in the past)',a,"iat","check_failed");if(e<0-v)throw new n.ie('"iat" claim timestamp check failed (it should be in the past)',a,"iat","check_failed")}return a}},90132:function(e,t,r){r.d(t,{l:function(){return f}});var n=r(26135),o=r(61096),i=r(62947),s=r(10561);const a="given KeyObject instance cannot be used for this algorithm";let c;const u=async(e,t,r,n=!1)=>{c||=new WeakMap;let o=c.get(e);if(o?.[r])return o[r];const s=await(0,i.x)({...t,alg:r});return n&&Object.freeze(e),o?o[r]=s:c.set(e,{[r]:s}),s},l=(e,t)=>{c||=new WeakMap;let r=c.get(e);if(r?.[t])return r[t];const n="public"===e.type,o=!!n;let i;if("x25519"===e.asymmetricKeyType){switch(t){case"ECDH-ES":case"ECDH-ES+A128KW":case"ECDH-ES+A192KW":case"ECDH-ES+A256KW":break;default:throw new TypeError(a)}i=e.toCryptoKey(e.asymmetricKeyType,o,n?[]:["deriveBits"])}if("ed25519"===e.asymmetricKeyType){if("EdDSA"!==t&&"Ed25519"!==t)throw new TypeError(a);i=e.toCryptoKey(e.asymmetricKeyType,o,[n?"verify":"sign"])}switch(e.asymmetricKeyType){case"ml-dsa-44":case"ml-dsa-65":case"ml-dsa-87":if(t!==e.asymmetricKeyType.toUpperCase())throw new TypeError(a);i=e.toCryptoKey(e.asymmetricKeyType,o,[n?"verify":"sign"])}if("rsa"===e.asymmetricKeyType){let r;switch(t){case"RSA-OAEP":r="SHA-1";break;case"RS256":case"PS256":case"RSA-OAEP-256":r="SHA-256";break;case"RS384":case"PS384":case"RSA-OAEP-384":r="SHA-384";break;case"RS512":case"PS512":case"RSA-OAEP-512":r="SHA-512";break;default:throw new TypeError(a)}if(t.startsWith("RSA-OAEP"))return e.toCryptoKey({name:"RSA-OAEP",hash:r},o,n?["encrypt"]:["decrypt"]);i=e.toCryptoKey({name:t.startsWith("PS")?"RSA-PSS":"RSASSA-PKCS1-v1_5",hash:r},o,[n?"verify":"sign"])}if("ec"===e.asymmetricKeyType){const r=new Map([["prime256v1","P-256"],["secp384r1","P-384"],["secp521r1","P-521"]]).get(e.asymmetricKeyDetails?.namedCurve);if(!r)throw new TypeError(a);const s={ES256:"P-256",ES384:"P-384",ES512:"P-521"};s[t]&&r===s[t]&&(i=e.toCryptoKey({name:"ECDSA",namedCurve:r},o,[n?"verify":"sign"])),t.startsWith("ECDH-ES")&&(i=e.toCryptoKey({name:"ECDH",namedCurve:r},o,n?[]:["deriveBits"]))}if(!i)throw new TypeError(a);return r?r[t]=i:c.set(e,{[t]:i}),i};async function f(e,t){if(e instanceof Uint8Array)return e;if((0,s.R7)(e))return e;

1if((0,s.D2)(e)){if("secret"===e.type)return e.export();if("toCryptoKey"in e&&"function"==typeof e.toCryptoKey)try{return l(e,t)}catch(e){if(e instanceof TypeError)throw e}let r=e.export({format:"jwk"});return u(e,r,t)}if((0,n.ll)(e))return e.k?(0,o.D)(e.k):u(e,e,t,!0);throw new Error("unreachable")}},17456:function(e,t,r){r.d(t,{MX:function(){return u}});var n=r(88817),o=r(64158),i=r(39203);function s(e,t){if(e.startsWith("RS")||e.startsWith("PS")){const{modulusLength:r}=t.algorithm;if("number"!=typeof r||r<2048)throw new TypeError(`${e} requires key modulusLength to be 2048 bits or larger`)}}function a(e,t){const r=`SHA-${e.slice(-3)}`;switch(e){case"HS256":case"HS384":case"HS512":return{hash:r,name:"HMAC"};case"PS256":case"PS384":case"PS512":return{hash:r,name:"RSA-PSS",saltLength:parseInt(e.slice(-3),10)>>3};case"RS256":case"RS384":case"RS512":return{hash:r,name:"RSASSA-PKCS1-v1_5"};case"ES256":case"ES384":case"ES512":return{hash:r,name:"ECDSA",namedCurve:t.namedCurve};case"Ed25519":case"EdDSA":return{name:"Ed25519"};case"ML-DSA-44":case"ML-DSA-65":case"ML-DSA-87":return{name:e};default:throw new n.T0(`alg ${e} is not supported either by JOSE or your javascript runtime`)}}async function c(e,t,r){if(t instanceof Uint8Array){if(!e.startsWith("HS"))throw new TypeError((0,i.X)(t,"CryptoKey","KeyObject","JSON Web Key"));return crypto.subtle.importKey("raw",t,{hash:`SHA-${e.slice(-3)}`,name:"HMAC"},!1,[r])}return(0,o.Y)(t,e,r),t}async function u(e,t,r,n){const o=await c(e,t,"verify");s(e,o);const i=a(e,o.algorithm);try{return await crypto.subtle.verify(i,o,r,n)}catch{return!1}}},26135:function(e,t,r){r.d(t,{Gv:function(){return o},M3:function(){return c},W2:function(){return a},fz:function(){return i},ll:function(){return s},t9:function(){return u}});const n=e=>"object"==typeof e&&null!==e;function o(e){if(!n(e)||"[object Object]"!==Object.prototype.toString.call(e))return!1;if(null===Object.getPrototypeOf(e))return!0;let t=e;for(;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function i(...e){const t=e.filter(Boolean);if(0===t.length||1===t.length)return!0;let r;for(const e of t){const t=Object.keys(e);if(r&&0!==r.size)for(const e of t){if(r.has(e))return!1;r.add(e)}else r=new Set(t)}return!0}const s=e=>o(e)&&"string"==typeof e.kty,a=e=>"oct"!==e.kty&&("AKP"===e.kty&&"string"==typeof e.priv||"string"==typeof e.d),c=e=>"oct"!==e.kty&&void 0===e.d&&void 0===e.priv,u=e=>"oct"===e.kty&&"string"==typeof e.k},49022:function(e,t,r){function n(e,t){if(void 0!==t&&(!Array.isArray(t)||t.some(e=>"string"!=typeof e)))throw new TypeError(`"${e}" option must be an array of strings`);if(t)return new Set(t)}r.d(t,{F:function(){return n}})},36012:function(e,t,r){r.d(t,{n:function(){return o}});var n=r(88817);function o(e,t,r,o,i){if(void 0!==i.crit&&void 0===o?.crit)throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');if(!o||void 0===o.crit)return new Set;if(!Array.isArray(o.crit)||0===o.crit.length||o.crit.some(e=>"string"!=typeof e||0===e.length))throw new e('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');let s;s=void 0!==r?new Map([...Object.entries(r),...t.entries()]):t;for(const t of o.crit){if(!s.has(t))throw new n.T0(`Extension Header Parameter "${t}" is not recognized`);if(void 0===i[t])throw new e(`Extension Header Parameter "${t}" is missing`);if(s.get(t)&&void 0===o[t])throw new e(`Extension Header Parameter "${t}" MUST be integrity protected`)}return new Set(o.crit)}},61096:function(e,t,r){r.d(t,{D:function(){return i}});var n=r(44203),o=r(24248);function i(e){if(Uint8Array.fromBase64)return Uint8Array.fromBase64("string"==typeof e?e:n.D0.decode(e),{alphabet:"base64url"});let t=e;t instanceof Uint8Array&&(t=n.D0.decode(t)),t=t.replace(/-/g,"+").replace(/_/g,"/");try{return(0,o.y)(t)}catch{throw new TypeError("The input to be decoded is not correctly encoded.")}}},28622:function(e,t,r){r.d(t,{i:function(){return a}});var n=r(61096),o=r(44203),i=r(26135),s=r(88817);function a(e){if("string"!=typeof e)throw new s.Dp("JWTs must use Compact JWS serialization, JWT must be a string");const{1:t,length:r}=e.split(".");if(5===r)throw new s.Dp("Only JWTs using Compact JWS serialization can be decoded");

1if(3!==r)throw new s.Dp("Invalid JWT");if(!t)throw new s.Dp("JWTs must contain a payload");let a,c;try{a=(0,n.D)(t)}catch{throw new s.Dp("Failed to base64url decode the payload")}try{c=JSON.parse(o.D0.decode(a))}catch{throw new s.Dp("Failed to parse the decoded payload as JSON")}if(!(0,i.Gv)(c))throw new s.Dp("Invalid JWT Claims Set");return c}},24717:function(e,t,r){r.d(t,{_:function(){return s}});var n=r(61096),o=r(44203),i=r(26135);function s(e){let t;if("string"==typeof e){const r=e.split(".");3!==r.length&&5!==r.length||([t]=r)}else if("object"==typeof e&&e){if(!("protected"in e))throw new TypeError("Token does not contain a Protected Header");t=e.protected}try{if("string"!=typeof t||!t)throw new Error;const e=JSON.parse(o.D0.decode((0,n.D)(t)));if(!(0,i.Gv)(e))throw new Error;return e}catch{throw new TypeError("Invalid Token or Protected Header formatting")}}},88817:function(e,t,r){r.d(t,{Dp:function(){return u},Rb:function(){return s},T0:function(){return a},Ye:function(){return c},h2:function(){return l},ie:function(){return o},n:function(){return i}});class n extends Error{static code="ERR_JOSE_GENERIC";code="ERR_JOSE_GENERIC";constructor(e,t){super(e,t),this.name=this.constructor.name,Error.captureStackTrace?.(this,this.constructor)}}class o extends n{static code="ERR_JWT_CLAIM_VALIDATION_FAILED";code="ERR_JWT_CLAIM_VALIDATION_FAILED";claim;reason;payload;constructor(e,t,r="unspecified",n="unspecified"){super(e,{cause:{claim:r,reason:n,payload:t}}),this.claim=r,this.reason=n,this.payload=t}}class i extends n{static code="ERR_JWT_EXPIRED";code="ERR_JWT_EXPIRED";claim;reason;payload;constructor(e,t,r="unspecified",n="unspecified"){super(e,{cause:{claim:r,reason:n,payload:t}}),this.claim=r,this.reason=n,this.payload=t}}class s extends n{static code="ERR_JOSE_ALG_NOT_ALLOWED";code="ERR_JOSE_ALG_NOT_ALLOWED"}class a extends n{static code="ERR_JOSE_NOT_SUPPORTED";code="ERR_JOSE_NOT_SUPPORTED"}class c extends n{static code="ERR_JWS_INVALID";code="ERR_JWS_INVALID"}class u extends n{static code="ERR_JWT_INVALID";code="ERR_JWT_INVALID"}Symbol.asyncIterator;class l extends n{static code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED";code="ERR_JWS_SIGNATURE_VERIFICATION_FAILED";constructor(e="signature verification failed",t){super(e,t)}}}}]);